GnuTLS is a secure communications library implementing the SSL, TLS and DTLS
protocols and technologies around them. It provides a simple C language
application programming interface (API) to access the secure communications
protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and
other required structures. It is aimed to be portable and efficient with
focus on security and interoperability.
===> The following configuration options are available for gnutls-3.8.13:
DANE=off: Certificate verification via DNSSEC
EXAMPLES=on: Build and/or install examples
IDN=on: International Domain Names support
KTLS=on: Enable support for in-kernel TLS
MAN3=on: Install API manpages (section 3)
NLS=on: Native Language Support
P11KIT=on: PKCS#11 and p11-kit support
SRP=off: Secure Remote Password support
===> Use 'make config' to modify these settings
- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
developers)
PR: 191274
Exp-run by: antoine
Approved by: portmgr (antoine)
security/gnutls: Fix hardcoded perl paths
Perl was recently added as a build tool for gnutls, and immediately the
port fails to build on systems that do not have the /usr/bin/perl
symlink. The cause is harded perl path of "/usr/bin/perl". Shebangfix
will fix a couple of these, REINPLACE_CMD will fix the other. Committed
under the new "Just fix it" blanket, but it was tested in redports.
- Fix possbile DoS in TLS record decoding [1]
- Fix installation without NLS [2]
- Require gmake and perl for build because in some
occasions it will rebuild the documentation that
works in a proper way with gmake only and needs perl
- Bump PORTREVISION
Security: CVE-2013-2116
Reported by: mat [2]
- Drop automatic dependency detection [1]
- Do not link to -lphread directly [2]
- Use USE_PKGCONFIG [2]
- Pet portlint by removing ABI number references [2]
- Drop no longer actual --with-lzo=no switch, lzo support
is disabled by default anyway [2]
- Bump PORTREVISION
PR: 170390 [2]
Submitted by: Jason E. Hale [2], A.J. Kehoe IV (Nanoman) [1]
Update to 2.12.18. This update includes a dirty hack to prevent shared
library bump which is necessary because of not properly set LIBTOOLFILES.
This would be properly fixed after ports slush is over.
PR: 166307
Submitted by: delphij
Security: CVE-2012-1569, CVE-2012-1573
Feature safe: yes
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
- Switch to nettle as crypto library as it's primary library
supported by upstream and additionally there are some
inconsistences with libgcrypt 1.5.x.
- Bump PORTREVISION
Proper fix for gnutls.pc generation by ripping out 'zlib' part
from configure as it was originally submitted by Fumiyuki Shimizu in
ports/157647.
Pointy hat to: novel
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.
It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.
With help: marcus and kwm
Pointyhat-exp: a few times by pav
Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and
a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by: marcus
Approved by: portmgr
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk
(Only the first 15 lines of the commit message are shown above )
Update to 2.4.0.
Unlike previous major version bumps, this time ABI hasn't changed, so
the shared libraries' versions stayed the same. Therefore, this update
doesn't requite any special handling.
Add WITHOUT_OPENCDK and WITHOUT_LIBTASN1 knobs to respect if the
user wishes to build gnutls with the included versions instead of
the ones from ports.
PR: 121357
Submitted by: Naram Qashat <cyberbotx@cyberbotx.com>
Bump portrevision due to upgrade of devel/gettext.
The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).
PR: ports/124340
Submitted by: edwin@
Approved by: portmgr (pav)
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
supports them. This is determined by running ``configure --help'' in
do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
subdirectory detection.
PR: ports/111470
Approved by: portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by: pointyhat exp run
Temporary allow using included libtasn1 only to fix build.
PR: 96838, 96833
Submitted by: Carl Fongheiser <kf0yn@mchsi.com>,
Kyryll A Mirnenko <mirya@matrix.ua>
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.
Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.
Preliminary documentation can be found at:
http://people.FreeBSD.org/~ade/autotools.txt
which is in the process of being SGMLized before introduction into the
Porters Handbook.
Light blue touch-paper. Run.
